ixpdata kayıtları
ixpdata üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-732 Incorrect Permission Assignment for Critical Resource2
- CWE-269 Improper Privilege Management2
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-326 Inadequate Encryption Strength1
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
41Planlayın | CVE-2019-19897İstismar yok | In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service.ixpdata · easyinstall · CWE-78 | Kritik9,8 | %5,523 Oca 2020 |
40Planlayın | CVE-2019-19896İstismar yok | In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share.ixpdata · easyinstall · CWE-276 | Kritik9,9 | %3,023 Oca 2020 |
39İzleyin | CVE-2023-30131İstismar yok | An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other unsixpdata · easyinstall · CWE-94 | Kritik9,8 | %0,919 Eki 2023 |
35İzleyin | CVE-2022-35120İstismar yok | IXPdata EasyInstall 6.6.14725 contains an access control issue.ixpdata · easyinstall · CWE-312 | Yüksek8,8 | %0,11 Ara 2022 |
32İzleyin | CVE-2023-27791İstismar yok | An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG.ixpdata · easyinstall · CWE-338 | Yüksek8,1 | %0,919 Eki 2023 |
31İzleyin | CVE-2019-19893İstismar yok | In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can aixpdata · easyinstall · CWE-22 | Yüksek7,5 | %2,523 Oca 2020 |
31İzleyin | CVE-2019-19895İstismar yok | In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system.ixpdata · easyinstall · CWE-732 | Yüksek7,8 | %0,423 Oca 2020 |
31İzleyin | CVE-2023-27792İstismar yok | An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub direcixpdata · easyinstall · CWE-862 | Yüksek7,8 | %0,219 Eki 2023 |
31İzleyin | CVE-2023-27793İstismar yok | An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitivixpdata · easyinstall · CWE-269 | Yüksek7,8 | %0,219 Eki 2023 |
31İzleyin | CVE-2023-27795İstismar yok | An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key.ixpdata · easyinstall · CWE-269 | Yüksek7,8 | %0,219 Eki 2023 |
31İzleyin | CVE-2023-30132İstismar yok | An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key.ixpdata · easyinstall · CWE-326 | Yüksek7,8 | %0,119 Eki 2023 |
30İzleyin | CVE-2019-19898İstismar yok | In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator consolixpdata · easyinstall · CWE-319 | Yüksek7,5 | %0,723 Oca 2020 |
22İzleyin | CVE-2019-19894İstismar yok | In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system.ixpdata · easyinstall · CWE-732 | Orta5,5 | %0,223 Oca 2020 |
- CVE-2019-1989741Planlayın
In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service.
KritikCVSS 9,8İstismar yokEPSS %5ixpdata · easyinstall23 Oca 2020
- CVE-2019-1989640Planlayın
In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share.
KritikCVSS 9,9İstismar yokEPSS %3ixpdata · easyinstall23 Oca 2020
- CVE-2023-3013139İzleyin
An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other uns
KritikCVSS 9,8İstismar yokEPSS %0ixpdata · easyinstall19 Eki 2023
- CVE-2022-3512035İzleyin
IXPdata EasyInstall 6.6.14725 contains an access control issue.
YüksekCVSS 8,8İstismar yokEPSS %0ixpdata · easyinstall1 Ara 2022
- CVE-2023-2779132İzleyin
An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG.
YüksekCVSS 8,1İstismar yokEPSS %0ixpdata · easyinstall19 Eki 2023
- CVE-2019-1989331İzleyin
In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can a
YüksekCVSS 7,5İstismar yokEPSS %2ixpdata · easyinstall23 Oca 2020
- CVE-2019-1989531İzleyin
In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system.
YüksekCVSS 7,8İstismar yokEPSS %0ixpdata · easyinstall23 Oca 2020
- CVE-2023-2779231İzleyin
An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub direc
YüksekCVSS 7,8İstismar yokEPSS %0ixpdata · easyinstall19 Eki 2023
- CVE-2023-2779331İzleyin
An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitiv
YüksekCVSS 7,8İstismar yokEPSS %0ixpdata · easyinstall19 Eki 2023
- CVE-2023-2779531İzleyin
An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key.
YüksekCVSS 7,8İstismar yokEPSS %0ixpdata · easyinstall19 Eki 2023
- CVE-2023-3013231İzleyin
An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key.
YüksekCVSS 7,8İstismar yokEPSS %0ixpdata · easyinstall19 Eki 2023
- CVE-2019-1989830İzleyin
In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator consol
YüksekCVSS 7,5İstismar yokEPSS %0ixpdata · easyinstall23 Oca 2020
- CVE-2019-1989422İzleyin
In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system.
OrtaCVSS 5,5İstismar yokEPSS %0ixpdata · easyinstall23 Oca 2020